CVE-2007-5796: symantec proxysg_firmware Cross-site Scripting
Vulnerability summary
CVE-2007-5796 is a medium (CVSS 4.3) Cross-site Scripting vulnerability in symantec proxysg_firmware. EPSS estimates a 2.35% chance of exploitation in the next 30 days, higher than 83.5% of scored vulnerabilities. 1 public exploit is recorded.
Timeline
- 03-11-2007PublishedVulnerability first disclosed.
- 07-08-2024Last modifiedVulnerability information updated.
Description
Cross-site scripting (XSS) vulnerability in the management console in Blue Coat ProxySG before 4.2.6.1, and 5.x before 5.2.2.5, allows remote attackers to inject arbitrary web script or HTML by modifying the URL that is used for loading Certificate Revocation Lists.
CVSS metrics
1 score · 1 source · 1 versionEPSS trend
Probability
2.35%
Chance of exploitation in the next 30 days
Percentile
84%
Versus all other CVEs
30-day change
No change 0.00 pp
From 2.35% on 22-09-2026
Known exploited
Compare KEV catalogs
CISA KEVNot in the CISA KEV catalog.
ENISA CNWNot in the ENISA CNW catalog.
CIRCLNot in the CIRCL catalog.
Public exploits
1 foundBlue Coat ProxySG Management Console - URI Handler Multiple Cross-Site Scripting Vulnerabilities
Maturity: weaponized
Weaknesses
CWE · root causeAffected systems
Symantec1 product
- proxysg_firmware< 4.2.6.1 | ≥ 5.0.0, < 5.2.2.5
1 vendor · 1 product
References
5 links- www.bluecoat.com/support/securityadvisories/advisory_cross-site_scripting_vulnerabilityX Refsource CONFIRMPatchVendor Advisory